FedRAMP

Overview

It is a certification program that allows federal agencies to use cloud providers for increasingly secure/sensitive government or government-adjacent data.

FedRAMP defines three categories regarding levels of security, Low, Moderate, and High.

The higher the security level the more restrictions are in place.

Box is already certified as FedRAMP Moderate and High.

Considerations

In order to be FedRAMP High compliant, your administrator must setup Box in very a very specific way. It is possible that the administrator has further restricted access to Box functionalities.

Consult with your administrator to identify security restrictions in place that might affect the usage of the API.

API usage in FedRAMP High

For FedRAMP high, Box uses a specific domain, box-gov.com and this affects all API's entry points.

API Restrictions

The following API entry points are not yet available for usage under FedRAMP High configuration.